Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
File: oWsNirSUNlULar9Ft5A1rsav8jw.mft (raw, json)
Hash identifier: vDv13/kYKxMgPpJcP537/K//fDZQRXrG8jw2YJZSwb0=
Subject key identifier: EA:F1:0E:DA:EA:58:0D:B8:7D:B2:34:87:95:C6:4D:56:B7:A6:6E:58
Authority key identifier: A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
Certificate issuer: /CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Certificate serial: 019FAC07EBFE4ED14A102F7D57E2C67F1B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
Manifest number: 19E2
Signing time: Wed 29 Jul 2026 04:00:28 +0000
Manifest this update: Wed 29 Jul 2026 04:00:28 +0000
Manifest next update: Thu 30 Jul 2026 04:00:28 +0000
Files and hashes: 1: eH9pN3T8uZtfjzNIHm2QIWz86JU.roa (hash: 6WTiCPJHOrzizrSNq8riDUFegfS58h7BM9hToFWx7eQ=)
2: oWsNirSUNlULar9Ft5A1rsav8jw.crl (hash: Koz6gnRtPPBi02a/BNtPBp6bujfhIIBcHxziE7BJTkk=)
3: rrDoPtBcmYrtFsSBQoQOi4LhCEs.roa (hash: 6GGMw5jhv2E0iY7GXeItoH474mvVadIlFXmHfEnSu/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:07:eb:fe:4e:d1:4a:10:2f:7d:57:e2:c6:7f:1b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a16b0d8ab49436550b6abf45b79035aec6aff23c
Validity
Not Before: Jul 29 04:00:28 2026 GMT
Not After : Jul 30 04:00:28 2026 GMT
Subject: CN=eaf10edaea580db87db2348795c64d56b7a66e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:09:b0:9f:aa:f1:ea:dd:49:dc:74:65:b3:
11:b6:40:3e:8c:9b:08:16:88:7f:c7:29:81:96:2a:
0d:68:1b:d7:46:cc:e4:ab:4a:d3:23:f1:87:ff:59:
24:6e:9d:a6:6b:bb:af:96:49:04:2a:c7:eb:0b:65:
51:c3:63:45:50:19:a0:39:43:ff:1a:a4:6f:51:53:
e5:54:43:35:c1:4a:ba:66:67:c8:4d:df:51:9a:a8:
3e:9c:e6:de:d1:19:d1:b7:ea:af:8f:b2:7c:f5:c7:
ee:0b:56:02:13:79:0d:97:f3:7d:3e:0c:ac:45:a1:
f8:30:4a:a6:f9:4b:fe:2d:3f:ad:43:e9:c2:93:92:
a6:57:85:67:1f:00:98:74:91:20:bf:b5:bd:4f:f6:
c5:99:41:74:db:2f:71:22:29:ae:0d:75:03:a8:6a:
36:46:0c:f2:c4:98:ab:96:ed:cc:30:da:9b:88:0f:
6f:6f:46:d2:2f:06:98:d5:36:d9:dd:39:a8:8b:5e:
55:bb:d4:73:f9:8c:36:84:8e:36:eb:ca:43:82:9e:
21:49:c7:58:82:45:90:3c:59:6e:8d:1f:da:f9:05:
5d:77:10:db:46:af:ac:8b:61:8f:f5:e7:68:57:93:
2e:0a:03:d0:cc:8b:07:84:33:6d:e5:a2:a5:8d:43:
33:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F1:0E:DA:EA:58:0D:B8:7D:B2:34:87:95:C6:4D:56:B7:A6:6E:58
X509v3 Authority Key Identifier:
keyid:A1:6B:0D:8A:B4:94:36:55:0B:6A:BF:45:B7:90:35:AE:C6:AF:F2:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWsNirSUNlULar9Ft5A1rsav8jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5f4518-82e9-4292-a54e-15cc9dc7bd87/1/oWsNirSUNlULar9Ft5A1rsav8jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:88:ea:d9:df:50:4b:44:2f:0e:9e:42:9f:26:84:a6:82:6c:
d9:dc:a9:9d:a5:c0:c7:0f:71:17:18:6f:f2:32:14:e9:3c:33:
77:ed:b8:8e:10:88:01:4f:36:8b:34:18:55:b4:61:6a:b5:db:
2d:b7:90:de:b0:d5:76:08:53:7d:5e:79:be:ad:f4:04:e2:5f:
84:ba:6d:6a:db:88:b9:97:b6:d7:43:97:d3:70:bc:18:49:5f:
7a:3d:c6:de:80:be:49:4a:1d:77:2f:e5:b0:8d:42:18:d8:10:
a0:a5:07:b6:ec:63:bd:60:df:ea:73:1a:1a:ca:e5:6a:5e:a1:
9d:fc:1d:80:6f:b4:26:50:4f:be:35:49:7a:27:36:2e:02:80:
da:f8:fd:6c:1f:91:b3:20:f5:fa:d6:6e:04:63:62:32:fc:88:
51:e6:82:9c:a2:95:36:1e:ee:a2:9d:21:14:57:1f:7c:60:44:
0d:bb:20:f9:6c:09:39:8c:0e:ad:f2:86:49:f9:b5:f7:95:2d:
4f:27:12:2c:6b:3d:ac:31:a3:b9:b0:71:b0:59:45:2b:4c:aa:
e4:dd:66:ed:50:5a:e0:d6:a5:51:1a:a4:d0:ae:ed:31:55:f6:
49:f8:86:7e:2d:d2:4b:71:fb:3c:73:b1:04:a9:83:5c:0c:0e:
65:bf:78:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sB+v+TtFKEC99V+LGfxsWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNmIwZDhhYjQ5NDM2NTUwYjZhYmY0NWI3OTAzNWFlYzZh
ZmYyM2MwHhcNMjYwNzI5MDQwMDI4WhcNMjYwNzMwMDQwMDI4WjAzMTEwLwYDVQQD
EyhlYWYxMGVkYWVhNTgwZGI4N2RiMjM0ODc5NWM2NGQ1NmI3YTY2ZTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOIJsJ+q8erdSdx0ZbMRtkA+jJsI
Foh/xymBlioNaBvXRszkq0rTI/GH/1kkbp2ma7uvlkkEKsfrC2VRw2NFUBmgOUP/
GqRvUVPlVEM1wUq6ZmfITd9Rmqg+nObe0RnRt+qvj7J89cfuC1YCE3kNl/N9Pgys
RaH4MEqm+Uv+LT+tQ+nCk5KmV4VnHwCYdJEgv7W9T/bFmUF02y9xIimuDXUDqGo2
RgzyxJirlu3MMNqbiA9vb0bSLwaY1TbZ3Tmoi15Vu9Rz+Yw2hI4268pDgp4hScdY
gkWQPFlujR/a+QVddxDbRq+si2GP9edoV5MuCgPQzIsHhDNt5aKljUMzmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOrxDtrqWA24fbI0h5XGTVa3pm5YMB8GA1UdIwQY
MBaAFKFrDYq0lDZVC2q/RbeQNa7Gr/I8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1dzTmlyU1VObFVMYXI5RnQ1QTFyc2F2OGp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81ZjQ1MTgtODJlOS00MjkyLWE1NGUt
MTVjYzlkYzdiZDg3LzEvb1dzTmlyU1VObFVMYXI5RnQ1QTFyc2F2OGp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC81ZjQ1MTgtODJlOS00MjkyLWE1NGUtMTVjYzlkYzdiZDg3
LzEvb1dzTmlyU1VObFVMYXI5RnQ1QTFyc2F2OGp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX4jq2d9Q
S0QvDp5CnyaEpoJs2dypnaXAxw9xFxhv8jIU6Twzd+24jhCIAU82izQYVbRharXb
LbeQ3rDVdghTfV55vq30BOJfhLptatuIuZe210OX03C8GElfej3G3oC+SUoddy/l
sI1CGNgQoKUHtuxjvWDf6nMaGsrlal6hnfwdgG+0JlBPvjVJeic2LgKA2vj9bB+R
syD1+tZuBGNiMvyIUeaCnKKVNh7uop0hFFcffGBEDbsg+WwJOYwOrfKGSfm195Ut
TycSLGs9rDGjubBxsFlFK0yq5N1m7VBa4NalURqk0K7tMVX2SfiGfi3SS3H7PHOx
BKmDXAwOZb94ng==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:07:05 2026 by rpki-client